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SECRET 


DIRECTOR OF CENTRAL INTELLIGENCE 

Security Committee 


SEC0M-D-245 
7 December 1983 


MEMORANDUM FOR: Deputy Director, Intelligence Community Staff 
FROM: 

Chairman 

SUBJECT: Proposed SECOM Response to DCI Request 


25X1 

25X1 


1. Attached for your approval is a proposed response to the DCI's 
28 November 1983 memo randum, requesting additional information about SECOM' s 
status report to him. 


2. The DCI's offer to weigh in on the leak problem is gratifying, but 
the risk at this time of unfavorable publici ty seems to outweigh the likeli- 
hood of positive results. ! 


3. The request for the comparison of PD-24 and the proposed NSDD on 
communications and computer security probably can be fulfilled best by pro- 
viding the IC Staff's 28 October 1983 input to the DDCI. Subject to your 


approval, 

response. 


have included that docume nt as an attachment to the SECOM 


Attachment 
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DIRECTOR OF CENTRAL INTELLIGENCE 

Security Committee 


SEC0M-D-243 


7 December 1983 


MEMORANDUM FOR: Director of Central Intelligence 

VIA: Deputy Director of Central Intelligence £> .ncft 

'"j )Di rector. Intelligence Community Staff 

FROM: 

Chairman 

SUBJECT: Security Committee Activities 

REFERENCE: DCI Memorandum to C/SECOM, dated 28 November 1983 


25X1 

25X1 


1. In your response (Reference) to the Security Committee's recent 
status report, you asked (a) how prior DCI's have weighed in on the leak 
problem and (b) to see the comparison of PD-24 and the proposed NSDD on • 
communications and computer security. T 


2. Regarding leaks, you have exceeded by a considerable margin the 
efforts of the other DCI's to weigh in on the problem. The videotape you 
made in June is being shown around the Community and is being favorably 
i - Because of severe current press criticism of Administration 
efforts, it is unlikely that putting the DCI's prestige on the 
line at this time would serve a useful purpose. Your continued support 
.of FBI i nvestigation of speg ific leaks, however, could bring positive 
results. 


received. 

anti-leak 


3. The effort to replace PD-24 with a single NSDD covering both com- 
munications and computer security has been overtaken by events. The IC 
Staff input to the DDCI on this matter, including the SECOM comparison you 
requested, is attached. A draft replacement for PD-24, concerning only 
COMSEC, has been prepared and is being reviewed in the Community. | 


4. Please advise if further information is .desired 
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DC I /ICS 83-4044 
28 October 1983 


MEMORANDUM FOR: Deputy Director of Central Intelligence 
FROM: 


Director* inxe i ugerice twnnun i uy .>u 


off 


SUBJECT: 


Concern Relating to the Proposed Revision 
of PD/NSC-24 


1 A proposed revision to PD/NSC-24 (Telecommunications Protection 
Policv) has been formulated by Ken deGraf f enrei d of the NSC and selected 
members of the National Communications Security Committee (NCSC). The 
revision is based on the findings of the Countermeasures Organization Stud y 
produced under the auspices of the Senior Interagency Croup (Intelligence) in 
July 1983 in response to NSSD-2. Under this revision, PD/NSC-24 will be 
entitled "National Policy on Telecommunications and Automated Information 
Systems Security"— a significant expansion in the scope of activities 
covered - ! — This memorandum highlights the concerns and consents expressed by 
the IC Staff, CIA/OC, and C1A/0GC regarding the proposed revision. 

Attachments 1,2, and 3 (which were developed by the DCI's Security Committee, 
C1A/0C, and CIA/OGC, res pectively) provi de comparisons of the proposed NSDD 
with the present PD-24. I 


• ' ! 


2 . All parties are agreed that there is a need for national policies for 
the protection of telecommunications and automated information systems. The 
proposed revision would establish a single national policy and management 
structure covering both disciplines. Although there is philosophical 
agreement that separate policies might leave gaps in the protection of 
information as the technologies of the two disciplines converge, concerns were 
raised over the feasibility of managing a consolidated effort, particularly in 
jnew of the expanded scope of the systems addressed in the current proposal. 


3. The proposed NSDD identifies the Secretary of Defense as the j 

Executive Agent of the Government for Telecommunications and Automated Systems j 
Security. There is some concern within the IC Staff and CIA/OC over the 
appropriateness of having the Secretary in this role because the proposed NSDD j 
expands security to include information affecting privacy of US p ersons. 


CApailUd, SCUUI I WJ ...V I1.W1P — — » ' 

Several other related concerns are identified in the attachments. 


4. There is unanimous concern that the proposed NSDD does not accurately -j 
recognize the DCI's statutory responsibilities and authorities. Several 
actions in particular in the proposed NSDD could severely impact the DCI's j 
ability to carry out his responsibilities. These include: 


This memo is downgraded to CONFIDENTIAL 
upon removal of attachments. 
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9. It is reconwended that: 

o an official DCI response to this proposed NS?? *>e developed by 
the IC Staff in coordination with CIA/OGC, CIA/OS/ISSG, and 

CIA/OC; 

o the existing policies promulgated under the NCSC remain In effect 
until the draft NSDD has been revised to address the concerns 
stated in this memorandum; 

o the new draft NSDD be properly staffed with the agencies under 
the existing NCSC; and 


that progress be deliberate so as to allow incorpora 
results of the DCI's Computer Secur ity Project . I 


ion of the 


Attachments: a/s 
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SUBJECT: Concern Relating to the Proposed Revision 
of PD/NSC-24 


Distribution: 

Orig - DDCI 

1 - Executive Registry 
1 - Office of General Counsel 
1 - D/OC 
1 - D/OS 
1 - SECOM 
1 - D/ICS 
1 - D/PPS 
1 - ICS Registry 
1 - IHC Subject (LGS) 

1 - IHC Chrono 


ICS /IHC/ 
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SECRET 


83-5736 



28 November 1983 



MEMORANDUM FOR: Chairman, DCI Security Committee 
FROM: Director of Central Intelligence 


1. Thanks for your response to my request for concise information about 
what the committee is doing, how well it is doing, and how it might do better. 

2. The committee seems to have taken on an impressive array of assignments. 
I share its frustration at not getting more cooperation and more results on 
leaks and uniform protection of intelligence. It might help if I had a review 
of how and when prior DCIs have weighed in effectively to read the riot act 

and otherwise curb laxity in the handling of classified information. Has 
anybody ever had any success at this? 

3. I am expecting a briefing on computer security this week. 

4. Let me see the comparison of the proposed NSDD on "Telecommunications 
and Automated Information Systems Security" with the current environment 
governed by PD-24 and the areas in which the proposed NSDD would have impact 
on the DCI's statutory and executive order authorities for the protection of 
sources and methods. 



William J. Casey 
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